Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: w4p73CgynThb+09k2SsEgELoRnroX0Je3yWAs2CHcbE=
Subject key identifier: 11:B3:C5:20:D5:CC:B4:9C:96:68:88:F7:68:8E:ED:7A:B5:99:D0:22
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019A30B2F174FDAED59AC5B41708A8E0DA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 1445
Signing time: Wed 29 Oct 2025 16:00:24 +0000
Manifest this update: Wed 29 Oct 2025 16:00:24 +0000
Manifest next update: Thu 30 Oct 2025 16:00:24 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: 7wkB7Hbb861bE0jdF00mcpOutwmpqiKvkDxhCN1NjfI=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:b2:f1:74:fd:ae:d5:9a:c5:b4:17:08:a8:e0:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Oct 29 16:00:24 2025 GMT
Not After : Oct 30 16:00:24 2025 GMT
Subject: CN=11b3c520d5ccb49c966888f7688eed7ab599d022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:ae:b1:43:4e:a4:53:bd:5d:a2:db:d2:21:
32:76:8a:b1:9b:2f:cf:08:ec:36:3a:7a:48:a9:75:
61:43:a6:27:3d:48:26:cc:e7:aa:72:7c:95:fc:93:
ca:0f:a2:20:0f:11:b0:9e:6f:8e:28:e1:df:16:8b:
4d:3f:c4:65:f1:90:e8:57:9a:b4:e7:ce:4f:53:c9:
d2:a6:ff:fc:13:81:9a:af:02:5e:c9:67:31:12:88:
26:1d:f1:ee:22:3b:01:8b:02:50:37:b9:b6:d6:7d:
8a:b8:45:7e:41:51:0d:d1:7c:36:61:92:f4:58:17:
03:2d:56:8a:6b:ea:34:0e:33:02:71:1d:9a:f2:3e:
ee:8a:ad:df:8e:09:c5:78:7e:ea:b7:54:ac:f5:37:
89:09:5f:14:e6:ec:38:be:ad:1c:1c:83:f1:f8:52:
db:8d:12:80:cc:89:ec:03:54:94:1f:54:c6:52:75:
91:dc:8e:36:2b:d2:ec:28:ef:7b:17:9c:d7:d0:c3:
90:1d:c8:ee:2d:d5:18:df:45:10:17:cb:74:63:bc:
ad:7c:7f:4d:49:14:cf:e2:94:3d:08:f3:50:d1:f1:
c6:a1:5f:81:f8:11:67:6f:cc:7e:46:8e:57:05:a5:
e2:51:29:96:0f:d6:6e:7b:53:32:36:dd:54:76:3c:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:C5:20:D5:CC:B4:9C:96:68:88:F7:68:8E:ED:7A:B5:99:D0:22
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:b5:ba:69:3a:b7:83:d8:cb:00:cf:5b:c5:b9:32:8b:81:
35:a9:9d:5b:11:91:c1:57:40:6a:42:18:cc:b7:9f:27:b3:17:
ae:a6:05:ba:b9:f3:b2:bf:f1:2f:b9:6b:48:ea:b8:5e:1b:f4:
49:8b:e9:47:29:6b:1f:7e:49:70:30:15:a7:fd:33:e9:f5:01:
05:17:fe:0d:56:cf:04:67:eb:b6:c2:58:14:5f:c9:48:fd:84:
28:00:19:c5:3e:e4:c5:e5:ff:18:54:72:77:1b:fe:12:34:41:
81:ba:21:14:3c:d4:3a:f5:e6:4e:00:c3:a4:8c:fc:48:64:34:
06:89:0d:72:f7:95:9c:dc:17:60:85:55:59:13:ca:00:fd:ae:
b7:29:d4:77:bf:34:f8:10:ae:af:1a:27:a2:84:fb:b7:44:7a:
05:ec:f9:52:b4:b2:e1:72:d9:23:5a:f7:d5:58:d4:29:df:dd:
a8:fa:8e:38:7e:cd:e5:3d:16:94:41:a7:98:80:27:28:bd:75:
21:71:fe:88:c7:5b:a8:c5:10:81:89:c9:9e:6a:34:ca:10:88:
ca:a5:4b:6e:d7:db:d1:35:93:32:f2:9a:d7:ee:b4:63:0d:9c:
84:39:0e:2f:ca:3b:46:8a:c9:a5:77:36:f0:91:3b:dc:27:f6:
7a:73:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 22:18:38 2025 by rpki-client